om Rele ase 1.0 


VOLUME 20, NO. 7 25 JULY 2002 www.edventure.com 


Personal Identity Management: The Applications 


INSIDE 


The User’s Side 4 
PingID 
Ascio Technologies 
Global Name Registry 
another.com 
NetIdentity 
Box: The DNS 7 
I Ama Handy 13 
Midentity 
Box: Mobile models 
Upoc 
Freever 
People in Their Places 21 
Dotomi 
Meetup 
Stopping Spam at the Source 26 
Vanquish Inc. 
Resources & Contact 
Information 31 


Save the date! 

EDventure’s High-Tech Forum, 
November 3-5, Berlin. Visit 
www.edventure.com for details. 


PJedventure 


The conversation starts here. 


BY ESTHER DYSON 


Last month we covered the infrastructure of institutional identity 
management, from authentication and verification to authorization 
and directories. This month, we take a more user-centric point of view 
— from PingID, a toolset for personal identity management, to a range 
of identity-based services well beyond simple access to resources. 
Individuals may not have the same scale of security and data manage- 
ment challenges as corporations, but they also have fewer resources; 
they should welcome tools and services that help them manage their 
relationships with others — that is, the identity information they have 
about those others as well as about themselves. 


Some of the applications we discuss here depend on a strong identity 
management infrastructure; others are simply creative user-driven 
applications that depend on individuals’ ability to specify their own 
interests for themselves. Note the distinction between individuals 
managing their own information, and a marketer, employer or other 
organization doing so without the user’s direct involvement — the 
usual situation. It’s a fine distinction, but it’s important. 


Although everyone solemnly repeats that no one is in the market 
for identity management, that’s not quite true. What are logo T- 
shirts? What is managing a mailing list of friends, updating your 
contact information or posting links to your favorite sites or your 
most-desired birthday gifts? What’s having a name you like for 
yourself, instead of the one your parents or employer gave you? 


Indeed, it seems everyone in the do-it-yourself identity space plans 
to offer similar services: contact management, calendar, e-mail, 
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Web-hosting, perhaps vanity e-mail addresses or domain names. 
But these are rapidly becoming commodities, even though compa- 
nies are using different hooks to bring the customers in — everything 
from political correctness to sexy e-mail addresses, from domain- 
name enhancements to mobile-phone data backup. Most of these 
basic services will be loss leaders, designed to catch an early audi- 
ence — and their friends. Later on, the most compelling applications 
commercially will be those that allow for a transaction fee to be col- 
lected in a way that is neither annoying nor easily circumvented. 
Like most Web businesses, they face a key question: What should 
you give away as loss-leading “marketing,” and what should you sell? 


The key function, and one that currently generates chargeable traf- 
fic on metered wireless services, is often communication: What do 
you need an identity for if not for communicating with others? 
Increased use of communications — wireless, SMS, e-mail and all 
kinds of file-sharing — will lead to increased need for identity man- 
agement: defining relationships and access privileges, deciding 
whom to reach, managing personal data and the like. 


“Without person-to-person communication applications to take 
advantage of a digital ID, the masses simply do not arrive,” says Saul 
Klein, one of the architects of Passport at Firefly, who stayed on for 
two years after its acquisition by Microsoft and is now a partner of 
the Accelerator Group and an advisor to Global Name Registry. “As 
much as private enterprise (banking, shopping, photos, media, etc.) 
and governments (tax, health, education, etc.) may provide applica- 
tions to stimulate digital ID adoption, there is little network effect 
in these applications. Personal communications drive networks.” 
And the great thing for vendors is: They also drive adoption. There 
is nothing more viral than a personal communication application. 
(On the other hand, there is nothing more anti-viral than a personal 
communication application that sucks.) 


Identity-based applications: Beyond contact management 
This issue begins with a note on PingID’s forthcoming personal 
identity management tools — a contrast to the more corporate 
approaches of Microsoft Passport and Liberty Alliance, covered in 
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our June issue. We then move on to look at some specific personal 
identity-based companies, exploring a variety of ways to extend 
basic name or identity services, first on PCs and then on mobile 
platforms — although they are rapidly merging anyway. We conclude 
with a sampling of some creative new applications for a world 
where the individual is key. Many of them are targeted at mobile- 
phone users, who tend to be active communicators — and who can 
easily be billed through their carriers. 


What’s interesting about all these services, aside from their intrinsic 
value (most of them!) to individuals, is the variety of business mod- 
els. They range from PingID’s open-source model of designing a 
spec and making money from implementations and service, to a 
variety of marketing-sponsored services, domain-name registration 
as a loss leader, and the Vanquish model, likely to be refined, of 
charging e-mail recipients’ ISPs for protection from spam, and 
senders a penalty for sending it. 


Many of the applications described here focus on community. They 
tend to be targeted at and attract the young, who are just beginning 
to establish their own identities and find new friends. . .and who 
have the time to worry about their identities rather than their work. 
But instead of the earlier model of “build a community space and 
the users will come,” these applications focus more on helping indi- 
viduals to present themselves, to manage their relationships with 
other people and to form their own communities. 


That creates a certain tension, of course. From the users’ point of 
view, the best service is often just to reduce friction, to help people 
present themselves and find one another and overcome barriers. 
But from a vendor’s point of view, friction — i.e. purchase opportu- 
nities, ads on Websites and the like — is the value-added, the extra 
ingredient that fosters revenue growth. Call it the dichotomy 


between soap, which reduces a person to his bare, clean essence, and 


cosmetics, which embellish and enhance the person. The market for 
soap is fairly saturated, whereas the market for cosmetics is just 
about infinite — especially as fashions change. (There will surely be 
fashion trends in identity as well.) 
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Long ago, in the days before 
most people can remember, 
computer marketers envi- 
sioned the archetypal per- 
sonal application as mana- 
ging a wine cellar — perhaps 
reflecting the interests of the 
marketers in the industry — 
or recipes. Now, the model is 
managing contact lists — that 


is, identities. 
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For example, some of the companies in this issue operate with surprisingly lean 
staffs. . and their goal is to keep them lean by selling the identity equivalent of soap 
— “just a name, please!” NetIdentity (pace 11), for one, can generate a nice profit by 
keeping its costs low and simply selling third-level domain names as e-mail address- 
es at $20 each by subdividing ad infinitum second-level domain names that go for 
about $10 a pop. Why get too big when the company is nicely profitable with 12 
employees and no marketing? 


The alternative is to use identity-based services as a loss leader for other services 
(MIDENTITY, PAGE 14, AND UPOC, PAGE 17) — a never-ending cycle as others enter the market 
and the initial services become commodities — or to sell oneself to a Hotmail or 
Yahoo! that could increase almost any paying customer base by an order of magni- 
tude with no incremental marketing. Or you can raise serious venture capital as 
Global Name Registry (pace 8) has done, and spend millions on marketing. 


Identity Management: The User's Side 


Both Passport and Liberty Alliance (SEE RELEASE 1.0, OCTOBER 2001, MARCH 2002 AND 
JUNE 2002 ) are corporate ventures, with architectures and policies controlled by cor- 
porations. But to succeed, they need to satisfy the demands of a critical mass of indi- 
viduals, with, in the words of Liberty Alliance chairman Eric Dean, “convenience, 
control and clarity.” These individuals, moreover, are not your grandfather’s individ- 
uals: They are computer-literate, demanding and cynical. They read about Micro- 
soft’s security flaws, and they mistrust Liberty’s use of the word “customers” to mean 
giant corporations. 


Moreover, even if Microsoft and Liberty Alliance execute flawlessly, they can’t con- 
trol what their partners do — with the user interface, and with data policies. Passport 
itself doesn’t keep data, nor does the Liberty Alliance spec (announced as planned 
this month), but just as they facilitate linking an authentication to an ID, so do they 
also facilitate linking data about an individual to more data about that individual, or 
passing it on in context to another party. 


It’s still the companies, rather than the individual users, who hold the users’ data — 


even though the users get to specify what happens to it. Both Passport and Liberty 
Alliance make the process of the user’s specifying which data can pass from one 
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Website to another explicit; this is a genuine benefit, and one that will leave many 
people thinking more critically about who has their data and why in the first place. 


PingID: | want my own ID! 

The worse these companies are (or are perceived to be) at working on behalf of their 
users, the more individuals and many developers will gravitate towards alternatives 
that seem to be more user-oriented. One early entrant in this space, trying to attract 
adherents with its own spec, is PingID’s Open Digital Identity Infrastructure (ODII), 
an open-source initiative for peer-to-peer and distributed (i.e. federated) client/ 
server identity management. That is, an individual could maintain his own data, or 
he could rely on some outside service to do it. Authentication, obviously, must be 
done by a trusted third party (except for people already known and trusted, using 
some kind of key). PingID’s success will depend on developers’ creating compelling 
applications that use ODII, and finding it more open, more flexible and more cost- 
effective than the more corporate alternatives. Although consumers will like the 
notion of self-managed identity, they will more likely flock to applications that are 
useful and easy-to-use (just as they care about privacy in surveys but are often free 
with their data when offered the slightest inducement). 


PingID is loosely led by Andre Durand, who also founded Jabber.inc, the .com side 
of the open-source Jabber instant-messaging initiative created by Jeremie Miller. But 
the challenges may be greater in this market. While Jabber had the signal advantage 
of being able to coalesce a movement that already existed around an application that 
people were already using (instant messaging), PingID will need to attract develop- 
ers in a still immature market. The recent publicity around Passport and Liberty 
may well help. 


Like Jabber, PingID will come in both .org and .com flavors. The .com side is prom- 
ising for September a working product that will provide a complete framework for 
individuals to create, manage and exchange their own digital identities and profile 
information. Licenses will be free except for “commercial use with over 1000 identi- 
ties,” leaving room for lots of experimentation and personal use. 


Like Passport and Liberty, PingID handles the same function of federation — the 
ability to share identity authentication across applications — but PingID is more 
ambitious. It attempts to set standards not just for a federatable identifier, but also 
for a variety of common elements of profile information. In addition, PingID plans 
to offer a robust, open toolkit and protocols for setting and managing visible policies 
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around profile information. If it is successful, its software will be used by or interop- 
erate with most of the applications mentioned here. 


What gives PingID any credibility at all, up against Liberty Alliance and Microsoft? 
For starters, it’s designed to appeal to a different audience, whether developers or 
users, who would prefer not to use the corporate approach. Says Durand, “Everyone 
I speak with who is on the ‘people’s’ side of this argument — asking for a system that 
puts them first — immediately takes note of our underlying open and networked 
approach. Of all the things which need to have a ‘people’s movement, it’s not Web 
servers, app servers or office suites; it’s identity infrastructure.” 


Technically, it could interoperate nicely with Passport and LA, using them as an 
authentication service, but allowing the individual to control the profile information 
for himself. Nonetheless, let’s face it: If you want to fly with United, youre going to 
have to give them your credit card and trust them to know about your flight plans. 


Ascio Technologies: Identity OEM 

Ascio, based in Copenhagen, is one of the largest DNS infrastructure OEMs, provid- 
ing underlying tools and services to a host of domain-name registrars. It’s an affiliate 
of Speednames, a leading European registrar founded in 1999. Ascio co-founder and 
cto Nikolaj Nyholm grew up as a Dane living in the US, and has a strong sense of his 
own identity: “It was always easy for me to be portable as long as I could take my 
interests and my own history with me. My sisters had a different experience because 
they would always get very involved with each place we lived.” But, he stresses, he 
and Ascio take a very European approach to privacy issues. 


The Ascio founders decided they wanted to leverage their technology for a bigger 
customer base than their own marketing efforts could support, and they found a 
ready market for it among the host of companies that started registrar services fol- 
lowing the market’s opening-up by ICANN in 1999. Ascio now sells to and through 
about 120 ISPs, telcos, portals and registrars. 


“For all its flaws,” says Nyholm, “the DNS is the only naming infrastructure that is 
ubiquitous and has some kind of regulation. It made sense to use the DNS as a foun- 
dation and to upgrade the functions it could support.” Thus, Ascio is now offering a 
range of identity management and identity-based services that its partners can resell 
to individuals, all tied to a domain name. The technology is implemented in SOAP 
(Simple Object Access Protocol) and supports most relevant standards, including 
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THE DOMAIN NAME SYSTEM: NAMES AND IDS AWKWARDLY SMASHED TOGETHER 


Aside from broad-based authentication tools such as 
Passport and credit cards, there is one more piece of the 
digital identity infrastructure already firmly in place, even 
though it is not yet built out. It operates worldwide, guar- 
anteeing access to an identity marker from anywhere on 
the Net, independent of context. That is the Domain Name 
System (DNS), which operates in a hierarchy and is global- 
ly consistent. The identifiers it uses are part of the basic 
architecture of the Internet, and underlie the promised 
universality of Web services. 

Unfortunately, the identifiers got mixed up witha 
naming system, so that many people and companies buy 
more identifiers than necessary in order to protect their 
trademark and naming rights (but that’s another story we 
will cover elsewhere). By contrast, no one cares what his 
Amex number is, and you don't search for friends by any 
institution's account number. But whether it's a feature or 
a bug, the DNS is a naming as well as an identification sys- 
tem, with a worldwide infrastructure that keeps the whole 
thing running with amazing reliability. 

The DNS supports both Website addresses and e- 
mail addresses. Best estimates are that about 4 million 
domain names have been registered and used by individu- 
als, or a Small but increasing share of the roughly 45 mil- 
lion total. There are more personal e-mail addresses, but 
most individuals are still using nickname546@ISP.com or 
Personal.Name@Employer.com. (And of course, many have 
several. At PC Forum - not arandom sample, for sure - the 
average seemed to be about four.) 

The DNS is a fine basis for an identity business, 
although its foundations are regulated by ICANN. In itself, 
selling domain names has not been as profitable as many 
who jumped in had hoped; it is highly competitive. More - 


over, the companies in it often seem to compete on the 
basis of dubious business practices rather than value- 
added or better customer service. Fortunately, that's 
beginning to change, with companies such as Tucows (see 
Release 1.0, June 2002), Ascio/Speednames and Global 
Name Registry building out interesting ancillary services. 


The whatis of Whois 

Meanwhile, one of the bigger issues that ICANN 
must deal with (other than the issue of its own existence 
and structure) is the Whois, the database it controls of 
domain-name registrants. Currently, the Whois is sup- 
posed to contain personal names and contact information 
(address, e-mail address and phone number) for the regis- 
trant (including technical and billing contacts) of each 
domain name. It's a handy tool for finding out who's behind 
a Website, and is widely used by law enforcement, corpo- 
rations worried about copyright or trademark infringe- 
ments, regular guys wanting more background on an 
online merchant. ..and spammers. Because the Whois 
information is public and can so easily be abused, many of 
the Whois entries are visibly incomplete or inaccurate 
(such as Mickey Mouse or the name of anyone who has 
recently annoyed a spammer or a pornmaster, as entered 
by the spammer or pornmaster himself). ICANN and its 
members are working to define some new policies for the 
Whois that would limit public disclosure but create some 
mechanisms for access for legitimate reasons. [MORE 
INFORMATION IN RESOURCES, PAGE 31.] Because it is pub- 
lic, the current Whois is not a good place for profile infor- 
mation, but it's definitely worth using and improving. 
(DISCLOSURE: ESTHER DYSON WAS CHAIRMAN OF ICANN 
FROM 1998 TO 2000.) 


SAML (and by implication, Liberty Alliance) without much effort. The identity 
information is available from anywhere via a link to the unique domain name — 


although what profile information is disclosed is up to the user. “We offer a normal 


home page,’ says Nyholm, “and then a sort of ‘master’ home page where data is dis- 


closed selectively according to who’s asking.” 


Despite Ascio’s close relations with the partners already using its name-registration 


technology, Nyholm says, “It’s still a challenge reaching the market. There’s no com- 
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ASCIO TECHNOLOGIES INFO 


mon taxonomy yet for what we're doing. . though were hoping to 


Headquarters: Copenhagen, Denmark 


Founded: February 1999 
Employees: 90 


work with PingID.” Since initially launching “Digital Identity” as a 
single soup-to-nuts service, Ascio has now moved to marketing the 
components separately, as a set of user applications (calendaring, 


Key metric: potential user basé oft.25 groupware and the like) on the one hand, and relationship manage- 
million members (from existing ment functions such as single sign-on and transaction authorization 
partners) on the other. 


Funding: $14.5 million from Danske 
Venture Partners, Gudme Raaschou 
Technology Fund, Internet Ventures 


Scandinavia and Vaekstfonden 


URL: www.ascio.com 


So far, Ascio’s digital identity services are in operation at three 
European service providers — Nominalia (Spain), EPAG (Germany), 
United Domains (Germany) — and coming soon at NamePlanet (the 
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company that gave birth to Global Name Registry, below). Those 
four customers, plus some larger, unnamed pilot customers, are 
beginning to get the idea and to build out services such as shared contact informa- 
tion, where each user maintains his own data and the service manages the links. For 
example, a user — call him Jesper — may have a set of friends who manage and update 
their own data while Jesper’s digital identity service links to them. The provider’s 
application manages the links and the updating, and controls access as specified by 
each of Jesper’s friends providing data. Jesper may also have a link to his own health 
records, which by Danish law are physically kept by a hospital, but to which he also 
(again by law) has access. 


Most of these identity-based applications are not new in themselves, Nyholm notes. 
What’s new is to consolidate everything around a single account, anchored by a 
domain name. 


Global Name Registry: Every.one.name 


Global Name Registry, the provider of .name addresses, which it wholesales to 
Ascio/Speednames among others, is not yet a customer for Ascio’s identity-manage- 
ment tools. But it has a close working relationship with Ascio and it is already 
thinking along those lines: It was founded in 1999 in Norway as NamePlanet to 
provide personal e-mail addresses in a variety of generic and country-code Top- 
Level Domains, or TLDs. (NamePlanet’s original assets are now being merged with 
NetlIdentity, page 11.) 


Now based in London, GNR offers the most personal of domain names under the 
name top-level domain as well as the corresponding e-mail addresses. Under its 
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unusual agreement with ICANN, GNR has the right to manage not just the name 
TLD but also the second-level domain names under it, such as smith.name or 
wolkowitz.name, basically all the first and last names in the world. (Some of the 
country-code registries also control Second-Level Domains, or SLDs, such as .co.uk 
or geographical references such as spb.ru.) 


Then it sells registrations for the third-level names, such as saul.klein.name and the 
corresponding e-mail address, saul@klein.name, to individuals. (Saul’s cousin, also 
Saul, can register klein.saul.name, or saul2.klein.name, and so forth.) Because GNR 
is a registry, accredited by ICANN, it does not sell the names directly, but rather 
operates through a host of registrars (most of whom sell other varieties of domain 
names as well). 


So far, the company has registered about 78,000 domains and 57,000 e-mail address- 
es, as well as about 1,200 “defensive registrations” to corporations and the like. GNR 
has developed, in negotiation with ICANN, a service with a set of 

rules whereby corporations can protect their trademarks by block- 
ing them from being misregistered in the name domain. Premium 


GLOBAL NAME REGISTRY INFO 


defensive registrations, which block the use of a trademark on either Headquarters: London, YK 


waves HHH Founded: November 1999 


the second or third level (i.e. ***.coke.name or coke.***.name), cost 


. : p ; Empl :45 
$1,000 wholesale, whereas Standard defensive registrations, which Mea 


Key metric: $3m+ marketing budget 


block a specific formulation of a trademark on both levels (i.e. Funding: “tens of millions” from Carlyle 


coca.cola.name), cost $150 per year. However, its not simply a Europe Venture Partners, 
money-for-a-word service; the defensive registrant needs to own a Northzone Ventures AS and Four 
trademark and its blocking can be challenged. If a corporation loses Seasons Venture AS 


URL: www.name 


too many challenges to legitimate registrants such as, say, Susie 
Coke, it loses its blocking rights to a registration altogether and for- 


feits the money paid. 


In addition to the e-mail addresses, which in fact are just forwarding addresses to 
whatever mailbox the user already has, and domain names, GNR plans to offer a 
variety of other identity-based services such as secure payment services, message- 
forwarding (not just to e-mail but to SMS and other media), and so forth. 


However, for now the company is focusing on operating the basic system smoothly, 
says ceo Andrew Tsai, who was previously president of Urbanfetch in New York. He 
is backed up by the two co-founders of NamePlanet, Geir Rasmussen and Håkon 
Haugnes, as cto and vp product management. 
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another.com: Viral, virtual T-shirts 

Also based in the UK, another.com is a seriously unserious vendor of e-mail address- 
es, initially targeted at feckless youth. Back in 2000, when money was freer, former 
computer-magazine publisher Steve Bowbrick raised about $10 million (plus $2 
million last year) to start the company. By last winter he claimed 22 percent of UK 
online teenagers, plus quite a few adults, as his users. But the service was free and 
money-losing, and the investors weren't willing to fork over any more money. 


So, with great trepidation, Bowbrick started charging last February. The results have 
been heartwarming for businesspeople everywhere: About 21,000 (or 10 percent of 
the active customer base) have signed up — initially at about $20 and now at $37 per 
year. Moreover, the rate of new sign-ups did not drop off despite the recent price 
increase. That’s still a run rate of only $700,000 or so per year, but it’s a start, and he 
asserts he can make a profit on that basis. 


The proposition is very simple: Kids — and adults — sign up with another.com and 
get rights to one @another.com e-mail address, plus 19 others with a variety of 
domains (from a selection of 12,000), such as @misspiggy.co.uk, @international- 
manofmystery.co.uk, @snowball.co.uk or @daftasabrush.co.uk. 


Bowbrick originally targeted the service at edgy youth; just read the Website copy: 


“Email addresses are the new t-shirts. For decades young people have 
pulled on t-shirts to communicate their personality, their allegiance, 
their indefinable cool. In 2001 the same young people pull on distinctive 
email addresses from another.com. 


Young Internet users have made it plain — boring email addresses have 
to go! They are not prepared to be seen in public with a bog-standard 
email identity, with a bunch of numbers before the @ sign or with 
somebody else’s brand name in their address.” 


Although the Website copy is now less edgy ($37 is a lot for a T-shirt, even one in 19 
flavors), that reference to T-shirts is no coincidence. E-mail addresses are what one 
wears in cyberspace. Bowbrick is full of interesting statistics (with no personal infor- 
mation) gleaned from his customers: 45 percent of the users are between 15 and 24; 
50 percent are over 18. The average unpaid user was 16; the average paid user is 22. 
The average user has about six identities, though that number starts to drop off for 
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subscribers in their twenties and older. Overall, girls and women ANOTHER COMINES 


tend to have more identities. “They get the concept better,” says 
Bowbrick. “Whereas for the men, by 25, they know exactly who they 


Headquarters: London, UK 
Founded: May 1999 


» 


are. 


Employees: 7 

Key metric: 21,000 paid subscribers 
Aside from the names, which will be a loss leader, the 10-person Funding: $12 million from several UK- 
company is starting to bring in revenues from ancillary services such based investors including 


as mail forwarding (so you can get your mail without logging on to 


the another.com site), extra mail storage, personal Web pages, blog- cial 


Accelerator Group and Eden Capital 


ging tools, and a host of other services. 


As a former magazine publisher, Bowbrick sees this as a subscription business: 
Think Time magazine, not AOL. He says, “We’re a platform for managing subscrip- 
tions. Once you own a subscription platform, you can sell anything through it. We’re 
trying to build up the concept of time on the Net, a life cycle. Our customers already 
have a pretty good concept of the passage of time; it was the industry that lacked 
one. We created big, rich Web sites with no concept of the consumer lifecycle, sub- 
scription and renewal, attrition and reactivation. Even the biggest sites are now hav- 
ing to graft these basic business concepts onto their products. No one is immune: 
Yahoo!, MSN, Lycos. . . . The simple business of taking a sum of money once per 
month or year was alien to the ad-driven sites.” 


Bowbrick has a good customer base to market into, but he’ll need to execute well to 
survive. Fortunately (for him), now that the .com boom is over and money is scarce, 
he’s unlikely to face competition from other free services. Indeed, he says, “The 
whole climate has changed. When we made that switch [to paid service], we stood 
out. Now Yahoo! and Hotmail have charges too. Meanwhile, our cost base is a frac- 
tion of what it was in the boom era.” 


Netidentity: Just the name, thanks 

In the United States, NetIdentity, née Mailbank, offers a similar service. It is in the 
process of merging with UK-based NamePlanet, and together they own about 47,000 
domain names, mostly based on last names. NetIdentity also has a variety of person- 
ality names, but the overall pitch of both companies is more “mature,” focused more 
on “real” last names and less on alternate identities. “We suggest that you won’t ever 
have to change your email address again,” says NetIdentity chairman Rawleigh Ralls — 
an appealing notion for people who have been through a series of ISPs or employer- 
based e-mail addresses. Adds investor Mark Cuban, “One of the beautiful things 
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about this business is ‘family virality- If esther@dyson.com sends an email to a rela- 
tive with the same last name, then that relative typically wants the same thing.” 

One e-mail account with a single address costs $24.95 per year, as compared to 
another.com’s default of up to 19 names for one $37 subscription fee. A hosted sec- 
ond-level domain-name Website share, such as www.Juan.Alice.net, costs an addi- 
tional $29.95. (The mail service is outsourced to Critical Path; (SEE RELEASE 1.0, JUNE 
2002). The underlying last-name domain names currently cost NetIdentity less than 
$10 a year, the company says. 


NetIdentity was founded in 1996 by two Vancouver entrepreneurs 
who discovered that almost 70 percent of the population in the US 


NETIDENTITY INFO 


share only 9000 surnames. With a computerized directory, they 


Headquarters: Reno, NV 
Founded: May 1996 
Employees: 10 


Key metric: $2 million in revenue in 


2001 


sorted the most popular last names and registered the domain 
names through Network Solutions. 


The company is still private, funded in 1999 by Mark Cuban, of 
Broadcast.com fame, and several other private investors including 


Funding: $3.5 million from Mark Cuban Ralls. They moved the company to Nevada but have mostly left it 


and several other private investors alone, other than acquiring NamePlanet. “Our goal is to keep it as it 


URL: www.netidentity.com is, and as simple as possible. One of the reasons we have been able to 
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grow without spending much money on marketing is that about 90 

percent of our traffic comes from people typing in their own last 
name in their Web browser,” says Ralls. “Ultimately, we hope to sign a big distribu- 
tion partner and leave it to them.” 


Total revenues, we guess, will hit $3 million this year (almost 70,000 accounts times 
about $40 per year) — not bad for a business of about 12 people. It is all based on 
about 14,500 domain names, including 12,000 popular surnames and a variety of 
special-interest ones, such as dallasmavs.com for the Dallas Mavericks, the team 
Cuban owns. 


However, the merger with NamePlanet, which brings another 32,500 domain names, 
will require some work — first to convert as many as possible of the subscribers to 
NamePlanet’s free, ad-supported Webmail-and-forwarding to paid customers for 
full e-mail service and Web-hosting. (The free Webmail service will also continue for 
now.) There are about 1.3 million of them, of which about a quarter are active and 
therefore good prospects, says Ralls. Second, and perhaps in order to accomplish the 
first, NamePlanet needs to localize its country-oriented Websites, especially as early 
adopters comfortable in English give way to a broader market. NetIdentity also 
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resells name addresses, notes Ralls, but hasn’t seen much demand for them, con- 
firming his opinion that marketing costs could eat up any potential profits. 


Other domain-name registrars are starting to work with various e-mail providers — 
or offer e-mail themselves — but they don’t have quite the “capital” NetIdentity does 
with its 47,000 easily reusable/divisible second-level domain names. 


Identity Management on a Stick: | Am a Handy 


Other than a name, what’s more personal than a personal computer? For many peo- 
ple, it’s their cell phone or their PDA. The Europeans have a good name for any of 
these devices, one they already use for a cell phone: a handy. It’s short for handheld. 
But it also means convenient, nearby, familiar. It’s much closer to being a personal 
extension — a hand, if you will — than a personal computer. 


As applications start to move onto or become accessible via devices that people carry 
with them, the possibilities — and the challenges — of identity management get much 
more interesting. It’s no coincidence that many of the corresponding innovations 
will appear on handies and only later move back onto laptops and even PCs. Mean- 
while, individuals will want to personalize their handies with ringtones and SMS 
buzzes, just as they personalize their PCs with screen savers or their offices with pho- 
tos and trade-show give-aways. 


Indeed, now that cell phones and palm devices are merging, we’re going to see a pro- 
liferation of truly personal applications — not just for your business, but for your life. 
It’s through these devices that consumers are likely to become more aware of just 
how personal these tools can be for themselves and for the people who might be try- 
ing to reach them. 


Identity applications make obvious sense for a handy: People are very sensitive to 
how they allow access by others to this device that lets others reach them directly. 
(Consider, for example, SoloMio and its call-handling (as opposed to -filtering) ser- 
Vice; SEE RELEASE 1.0, MARCH 2002.) You can say you weren't at your PC, but you're 
supposed to keep your handy at hand. Sure, it would be helpful to have the same 
sorts of things on a PC, but the need is less obvious. So this time, at least, handies — 
and Europe — may lead the way. 
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What are the business models? They range from advertising or advertiser-supported 
content to user-generated content, with users paying directly or in less noticeable 
ways. The companies below are all early in their lives, and are experimenting with a 
variety of revenue streams for mobile-phone-oriented services. But each has a differ- 
ent focus: Midentity helps users form communities but offers no content or market- 
ing; it is focused long-run on building up a user base to whom it can sell and charge 
directly for ancillary services based on a database of user information; Upoc fosters 
content-oriented communities and gets revenue from both marketers and carriers; 
Freever makes its revenues from commissions from carriers and is just beginning 
work on value-added or identity-specific content. It’s not clear yet which source of 
revenues will be most successful; this is definitely still a trial-and-error business. 


All these companies are in an awkward position: They don’t own the channels or the 
content, and they don’t own the customers. Like any intermediary, they will succeed 
only by being better at what they do. Midentity, for one, has to be better and more 
trusted at managing its customers’ content — data about themselves and their friends 
— than any alternative. And on the marketing side, they have to be better at finding 
and packaging advertisers’ content and at delivering audiences than the channels 
could be themselves. 


Midentity: Other people’s identities 

It’s when things go wrong that you best appreciate how they work, and how useful 
they are. Close to one million cell phones were stolen last year in the UK alone, notes 
Simon Grice, founder and ceo of Midentity: “People don’t worry about losing their 
phones; operators provide them virtually free to encourage adoption. But they do 
worry about losing their precious contact data. Our research says they'll pay about 
£10 ($15) a year for backup. Although most Europeans own mobile phones (well, 
most young or highly active/highly mobile ones do), most do not have backups of 
the data on their phones. Teenagers rarely have their own PCs, and even fewer take 
the trouble to connect them to their phones, he says. Specifically, in the UK more 
than 75 percent of the adult population have mobile phones, and 50 percent of chil- 
dren get one of their own by age 11. 


So, sometime in the next few months, Midentity will be launching Mbackup (code- 
name), its Internet-based data back-up service, not to Internet users per se, but to 
mobile-phone users. “We’re starting in the UK and Europe [sic], going after the UK 
teenage market [11-19], university students, ‘people in transition’ (from school to job 
or from job to job), as well as the usual [highly prized] highly active, highly mobile 
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WHAT A DIFFERENCE A MODEL MAKES! 


In Europe, mobile users get a much better deal: They pay 
to call or to send SMSes, but generally receive them free. 
Meanwhile, landline callers pay extra to call a mobile. By 
contrast, in the US users generally pay in both directions 
for both voice and SMS services, though many of them are 
now using bulk or unmetered service agreements. On both 
sides of the Atlantic, roaming users pay surcharges for 
inbound and outbound service of any kind. Moreover, more 
and more SMS traffic in Europe, generally for services or 
special content, is at a premium rate. Service providers 
are using premium SMS as a de facto billing mechanism 
for everything from news alerts and game downloads to 
auction transactions and parking fees. 


This convenient charging mechanism, lacking on 
the Web, has an offsetting disadvantage: the carriers' 
drive to control everything, and to get tangled up in con- 
tent provision instead of merely offering the pipes -- and 
perhaps charging commissions for extra traffic. Long run, 
value-added services will need to be provided and funded 
by marketers and content providers and users directly, 
rather than by the carriers. The need for each content or 
service provider to negotiate with multiple carriers is a 
disincentive that retards the market's growth and discour- 
ages innovation. You can look to the Web in comparison -- 
though in fact the proliferation of applications for the Web 
was funded by VCs. But eventually we'll get it right! 


customer,’ says Grice. Midentity will address each with different campaigns and dif- 
ferent services. The users will be able to back up their mobile-phone data simply and 
easily, Grice promises, but he won’t say how. It won’t require any calls to be made and 
will work with all mobile phones in Europe, he adds. Think Meetup (Pace 23) for 
mobiles: i.e. real-world venues that offer the service in exchange for physical traffic. 


Like its peers, Midentity won't make a big thing of privacy in its communications to 
users — or of identity management. “We decided to start with something that’s 
meaningful to people. If you walk up to someone in the street and offer to manage 
their digital identity, they'll look at you in dismay or horror, even,” says Grice, refer- 
ring to the UK government’s recent widely reviled attempt to ordain the use of a 
countrywide identity. . .er, entitlement card. “So we offer a container that the indi- 
vidual can use to store data. . .with an identity-management platform underneath.” 
Then that girl whose number you got the night before won’t be lost forever, even 
though your cell phone may be. 


A follow-on service, code-named Mcircles, will enable users to set up the phone/ 
SMS equivalent of using mailing lists instead of cc’s. If you copy an SMS to a second 
person (a difficult feat in itself for the untrained), it costs the same additional 
amount for each additional person. By contrast, Mcircles lets you send the message 
to a group (i.e. to a mailbox on its server) for the cost of a single message, and then 
distributes the message to the individuals who have joined the group, at no addition- 
al cost to the sender. The revenue model is simple: Both the sender and all the 
receivers each pay the cost of a single message at retail prices, and Midentity takes a 
cut from the operator’s take. The company has worked out agreements with most 
mobile operators in the UK. 
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Although each recipient pays for each message, contrary to European practice, that’s 
okay, since the recipient has asked to join the group and presumably welcomes the 
messages. The model deters spam, and spreads around the cost of the messages. (A 
user can unjoin a group at any time, or filter out any particular sender.) Thus, a 
group of kids at a rock festival, a group of adults planning a marketing event called 
festival, or even investment bankers planning a hostile takeover of a company code- 
named festival, can set up a group called “festival” and invite their counterparts to 
join the Mcircle. The sign-up, by phone, can be open or limited to specific individu- 
als, as the organizer declares. Users will pay for this service directly, Grice says. 


Both data backup and group-messaging services are something peo- 
ple can understand — and that they want, according to Grice’s focus 
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groups. Having interviewed hundreds of target customers, he now 


Headquarters: Cambridge, UK 


Founded: December 2001 


plans to use them to launch the services by getting the most influen- 
tial users to promote them to their friends. 


Employees: 6 
Key metric: expect to launch main ser- Grice sees Mbackup and Mcircles as the way onward to a slew of 
vices Q1 2003; projected 2004 rev- Net-based personal services reached by phone — and, incidentally, a 


enue over £2 million ($3 million) 


Funding: internal sources 


URL: www.midentity.com 


better avenue for charging individuals than the PC, where users still 
expect everything for free. He won’t discuss what comes after 
Mcircles except in general terms: “We interview them and they tell 


and UK angels 
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us what they want — mostly ways to be part of their own tribe.” 


Over time, the idea is to build a critical mass of personal information, initially con- 
trolled by the people who collected it from their friends and colleagues, and then to 
invite them to invite their friends to manage it online. Midentity will then sell those 
second-level users a service that lets them manage their own data and to update their 
friends’ data automatically, either by mobile phone or through a Net-connected PC. 
“Initially they're just storing backup; now we let their friends manage it for them. 
We're turning backup into a living data store,” says Grice. 


Thus, the first users will in effect be the marketers of the service, while the second 
round will be the real beneficiaries, in the sense of getting an identity management 
tool for themselves. (But of course the initiators will be invited to sign up too.) “Our 
customer is the end-user,” says Grice. “Were independent; we work for the user. 
There’s a whole host of organizations whose business is to manage individuals’ 
records for those organizations, but we allow individuals to represent themselves on 


WWW.EDVENTURE.COM 


the network. We address privacy for the individual, not access for the corporations. 
The privacy of the individual is the paramount thing.” 


Nonetheless, he hopes to get corporations to subscribe to the users’ updating service 
as well — with each user’s permission. This could make a lot of sense for the 
European market, especially, since the European Data Protection Act requires corpo- 
rations to offer users the ability to see and manage the data held about them by cor- 
porates, government and charities. And it could prove popular in the US, too, as 
companies become more clueful about personal data control and users start to 
demand it. For now, most companies can handle users’ requests for their own data 
only on an ad-hoc basis. They don’t know it yet, but they may soon be grateful for 
Midentity. The company plans to become a Passport partner and also to support the 
Liberty Alliance and PingID specs once they are out. 


Midentity takes a less commercial approach than Upoc in the US (below). Both earn 
“commissions” from the carriers for the traffic generated. But where Upoc also gets 
revenues for marketing services, Midentity’s model over time will be based increas- 
ingly on user fees for services based on its user — and user-controlled — database. 
Especially as people’s cell phones — and time — get more crowded, the Mcircles model 
seems appealing for those willing to pay for a service that has no sponsors, any- 
where. (On the other hand, for people who like marketers’ content, subsidized ser- 
vice will be the norm.) 


Before Midentity, Grice founded etribes, a profitable and for-profit consultancy that 
establishes and operates Websites for nonprofits. (He is now chairman and has 
passed the baton to new management, but remains majority owner.) That gave him 
some insight into “tribal” behavior and also the money to start Midentity, which is 
now looking for its first external round. Grice began his IT career as a programmer 
at CERN with Tim Berners-Lee in the early 90s; he returned to the UK to launch a 
Webmail service in 1996 (which he sold to World Telecom in 1998 for $3.5 million). 


Upoc: Messages and marketing 

Upoc (for Universal Point of Contact) is like a cross between another.com and 
Midentity — an edgy service that offers predefined communities but also lets people 
form their own cell-phone groups. It was conceived in 1999 by founder and current 
chairman Gordon Gould, formerly president of Rising Tide Studios (Silicon Alley 
Daily). Over time, the company wants to change its revenue model from that of a 
venture-capital- and advertiser-funded marketing medium to one where Upoc is 
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paid by wireless carriers for generating incremental traffic — i.e. the user pays ulti- 
mately. Ceo David Sklaver, who previously worked in advertising at DDB Worldwide 
and Wells Rich Greene, speaks enthusiastically about SMS volumes: 1 billion a day in 
Europe and 20 million a day in the US, of which about one tenth, or 2 million a day, 
are generated through Upoc. 


It makes revenues in three ways: revenues from marketing programs; revenues from 
direct sales of ringtones, Mark Anthony CDs and the like; and, increasingly, commis- 
sions from carriers, who generally charge the sender and the receiver for each SMS. 


Upoc’s edge when it began was its ability to send SMS messages across operators — 
something that European users take for granted. That edge will diminish with indus- 
try consolidation and increased interoperability, so it must rely on its first-mover 
advantage in SMS market share as it starts negotiating with carriers and looking to 
make a profit for its efforts. 


The company started out two years ago by offering its cross-carrier SMS compatibil- 
ity service free to carriers (and with no incremental charges to 
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users). The plan was to prove the theory that it could generate incre- 
mental revenues for the carriers, says ceo David Sklaver, and it did. 


Headquarters: New York, 
Founded: November, 1999 
Employees: 40 


The Average Revenue Per User (ARPU) of Upoc customers was 20 
to 40 percent higher, he says. The service allows users to sign up for 
free, and to join a variety of content-oriented groups, focused 


NY 


Key metric: 350,000 users in the US around everything from rock stars to stars in space, and from 


Funding: $21.3 million from Apax restaurants to sports teams. The service now has 350,000 users, 


Partners, Advent International, 
Sony Digital Media Ventures, 


Tribune Ventures, Arts Alliance and 


Allen & Company 


URL: www.upoc.com 


across all US carriers, skewing younger (25 years versus 41) than the 
average US cell phone user. “Music is key,” says Sklaver. “It doesn’t 
make much money, but it attracts people with passion, as do 
celebrities and extra-terrestrials.” Upoc also lets people build their 


own groups of, say, family members, book-readers, or friends out at 
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a ball game. 


So far, aside from a $20-million-plus VC stake, Upoc has been living mostly off rev- 
enues from marketing programs. What Sklaver calls Upoc’s “interest-certain” con- 
tent-oriented groups generate marketing revenues by creating buzz for clients/topics 
such as Nescafé, Atlanta’s WB television station, and a variety of films and music 


including Scooby Doo, Lord of the Rings, Capitol Records and Def Jam. 


WWW.EDVENTURE.COM 


Marketing to receptive communities is a nice business, but mobile “audiences” are 
small compared to TV audiences (even though they are more active). Enabling one- 
to-one marketing relationships is better — and even more lucrative. Relatively recent- 
ly, Upoc has begun working with pharmaceutical companies and will shortly launch 
a new service for one company — not in community mode, but with “Did you 
remember to take your medication tonight?” reminders and with “condition-relat- 
ed” content and user polling. That provides a genuine health benefit, and also keeps 
the manufacturer in touch with the customer in a helpful way. 


Meanwhile, Sklaver is now hoping for a whole new set of revenues from the carriers. 
He is negotiating for “commissions” to Upoc for incremental traffic ranging from 15 
to 35 percent, or a couple of cents per message. (The details vary from carrier to car- 
rier; other than AT&T, which delivers SMSes free, most US carriers charge both 
sender and recipient. SEE BOX, PAGE 15.) 


“What protects us is this great epiphany that the carriers had,” Sklaver says. “A lot of 
companies — game companies, content providers — are going bust. They know that 
the content creators will go out of business unless they work out something fair. 
They’re definitely not in the mode of building it themselves.” 


He adds: “It’s not just instant messaging. Our strengths are the community context 
and our applications, such as one-button SMS reply. A lot of our messages are 
geared towards responses, so we generate a lot of mobile-originated [MO] SMSes.” 
Because carriers charge more for MO than MT [mobile-terminated] messages, that 
makes them happy. 


But we're not sure about this revenue stream over the long term. As volume grows, 
the carriers consolidate, Upoc inevitably attracts competition, and more sponsored 
content moves on-wireless, the carriers’ negotiating position will only get stronger. 
Value-added marketing may well remain more lucrative than mere traffic. 


Freever: Free forever? 

Freever is a French start-up, founded in 1999 by three managers from Schlumber- 
ger’s smart card division. They saw an opportunity for anonymous chat using SMS, 
targeted at Generation Y. 


The service now operates in France, the UK, Germany, Italy, Spain, Belgium and 
(with two mobile carrier partners) China, although the bulk of the volume is still in 
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France and the UK. Now, it handles 40 million messages per month, generating rev- 
enues through agreements with the operators. 


The proposition is not so much to form communities, as to let people find one 
another through “forums,” the mobile-phone equivalent of billboards, around the 
obvious topics: football, music, dating, space, jokes and the like. The users send 
SMSes to each forum, which publishes them with the sender’s handle. To reach that 
person, anyone who logs on has to go back through the service (paying the carrier 
charges and indirectly Freever’s cut from the carrier). 


The public part of the service is moderated, and users are not allowed to publish 
their numbers or to say things that the moderators find offensive. 
(Off-color chat seems to be the norm, however, and much of the 
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operators’ work is not censorship but rather support for people who 


Headquarters: Paris, France 
Founded: June 1999 
Employees: 92 


Key metric: 5 million Euros in revenue in 


2001; 5 million Euros in 


Funding: 12 million Euros from CDC 


typed someone’s handle incorrectly or who want help switching from 
forum to forum.) More than 70 percent of the traffic happens one-to- 
one between people who find each other through Freever’s forums, 
but still communicate through Freever’s SMS server. The service 
operates on pseudonyms, though anyone can give out a number to 


H1 2002 


innovatión, ADD Partners and another member in a one-to-one message. These issues are impor- 


NetPartners 


URL: www.freever.com 
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tant: Freever wants to keep the traffic going through its server, so it 
gets credit for the traffic it generates, and the operators like the one- 


to-one messages because they generate the maximum revenue for 
traffic, given that mobile-originated messages generally cost more 
than mobile-terminated ones in Europe (cf. Midentity, where users will pay to 
receive SMSes from groups they have signed up for). 


Freever relies primarily on the users for its content, which enables it to run a prof- 
itable business, as people keep using it in search of new contacts and topic-oriented 
chat. (The model would not work as well if users found friends and then started 
communicating with them directly, independently of Freever.) A user can sign up 
for only one forum at a time (unless he has two phones, of course), and users switch 
frequently. The forums are determined not by user requests, but by Freever itself, in 
response to focus-group input (a subtle difference that probably leads to broader but 
blander topics). 


The business model keeps costs low and the service grows with a minimum of mar- 


keting. Although the company won't disclose revenues, it says it was profitable over- 
all in the first half of 2002. However, it is now adding an increasing amount of 
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specific content — including chats with musicians and other youth celebrities and 
interactive tv: On the evening of the final vote to find the two winners of the French 
equivalent of Big Brother, the service logged 577,537 messages, all charged as premi- 
um SMS with the revenue split among the carrier, the content provider and Freever. 
For now, this kind of content/relationship costs Freever nothing more than shared 
incremental revenue. In a sort of symbiotic relationship, the content providers want 
to increase audience involvement and generate revenues from it, while Freever and 
the carriers want to increase traffic — and the underlying cost is paid by advertisers 
on the television show. It will be interesting to see how all these relationships evolve. 


People in Their Places: Tommy Can You Sense Me? 


One facet of an identity profile that changes constantly is the location of the user 
online or in the real world. The two companies below — Dotomi and Meetup — look 
very different, but both upset traditional marketing models. They let users set terms 
for the use of space that was previously controlled by marketers. In the case of 
Dotomi, users can specify the vendors from whom they wish to receive communica- 
tions in "advertising" space on the Web. In the case of Meetup, they can find and 
meet people with common interests not in a chat room, but in a physical venue 
sponsored by the owner of that physical space. From the identity point of view, 
Dotomi allows vendors to detect the presence of their customers on the Web, while 
Meetup allows users to define their own interests and to find one another. 


Dotomi: Perfect pitch 

Dotomi in effect gives users (partial) control over the banners they see on the Web, 
and turns the content into one-to-one, two-way communications instead of semi- 
targeted one-way messages. Or put another way, Dotomi’s Ad-Vantage service offers 
users single sign-on for direct mail through the advertising space of the Net. 


The company was founded in July 2000 by Tamir Koch, co-founder and president of 
Orca Interactive, a provider of content management solutions for interactive TV 
that was sold to Emblaze Systems; Eyal Schiff, a retail marketer who designed the 
system functionality; and Yair Goldfinger, a co-founder and former cto of Mirabilis 
(the ICQ company sold to AOL). Although different in spirit from Mirabilis, 
Dotomi is a technical heir to the underlying capabilities of ICQ, which centered on 
presence management and speedy manipulation of user lists so that “buddies” could 
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contact each other in real-time peer-to-peer through the Net, rather than via store- 
and-forward mail servers. (The open-source implementation of that idea, Jabber, 
figures earlier in this issue as the springboard for Andre Durand of PingID.) 


Building on Goldfinger’s experience at Mirabilis, the basic technology at Dotomi is 
presence management via the Web. The Ad-Vantage service connects companies’ 
CRM systems to ad servers and cookies — placed at the user’s invitation. Ideally, it 
will turn the Web into a one-to-one service platform, whereby vendors can commu- 
nicate back and forth with their customers. (Of course, there’s nothing one can do 
about vendors’ drive to upsell.) 


The way it works is that a user, call him Juan, is encouraged to sign up with Dotomi 
by a partner; let’s use El Al airlines. Juan is intrigued by El Al’s offer to receive occa- 
sional personal — not “personalized” — account updates and other messages from El 
Al instead of ads when visiting his favorite portal. 


El Al, for example, could report back to him his account status and mileage, and tell 
him how many more miles he needs to reach Platinum status. His bank could 
encourage him to consolidate all his debts into a cheap long-term loan, and raise his 
short-term credit limit (if it considers him a good risk). Or it could simply remind 
him politely that his payment is overdue! Whatever the case, it also presents a button 
that allows him to reply. 


He could also get personal messages from his mother, sponsored by advertisers; he 
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Headquarters: Tel Aviv, Israel 

Founded: July 2000 

Employees: 21 

Key metric: Current product trial in 
Israel includes 18 major companies 

Funding: internal 


URL: www.dotomi.com 


Disclosure: Esther Dyson is on the advi- 


sory board. 


gets to create a buddy list (there’s that viral marketing notion again!) 
of people from whom he is willing to receive sponsored messages. 
The choice of sponsors is up to his mother, but different sponsors 
offer different kinds of messages for her to send — birthday greet- 
ings, for example, or party invitations or just a reminder. 


So when Juan’s mother wants to send a message to Juan to remind 
him about. .. never mind, we'll respect his privacy! . . .without wait- 
ing for him to check e-mail, she can go to her Dotomi service at her 
favorite portal (assuming it’s a Dotomi partner), select Juan’s name 
from her buddy list, select a sponsoring advertiser from his list 
(which is public to his buddies), and send away. 


Behind the scenes, Dotomi gives each participating vendor software to design a 
“campaign,” using XML files with templates and rendering instructions; the vendor 
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sends the campaign, including relevant personal data, to the Dotomi Manager serv- 
er, which sends everything except for the personal data on to the presenting Websites 
or to an ad network such as DoubleClick. When a registered user shows up, the pre- 
senting Website checks back with Dotomi for the appropriate campaign and data for 
that user, assembles the message on the fly, and presents it to the user. 


(For what it’s worth, there’s no technical reason Juan couldnt simply use Passport as 
a proxy for all the sites where he’s registered with Passport, though that too would 
require a business agreement that does not yet exist. Like Passport, Dotom1 itself 
does not require any user information other than an identifier and password. But of 
course each sponsor has a relationship with Juan, and uses information from that 
relationship to send him individual messages.) 


Whenever Juan shows up at a Dotomi partner portal, he’s more likely to get relevant 
messages than pop-ups for video cameras, a win all around. The portals’ real estate is 
more valuable, the advertisers become more effective as direct marketers retaining 
customers, and Juan gets useful information. Moreover, he can reply to the company 
directly from the banner — although it is up to the company how to respond, just as 
it is with any customer e-mail. (Let’s hope they do the right thing.) 


Currently, Dotomi is beta-testing the service in Israel. The team is well-known in 
Israel, and has contracts with the leading portal, Walla, and with vendors including 
Bank Hapaolim, El Al, Blockbuster, Amex, Sheraton and Domino’s Pizza (which we 
suppose will remember Juan’s fondness for mushrooms with ricotta). 


At this point, the clients are getting ready to send out personal commercial messages 
(basically, ad-hoc versions of the monthly mailings many of us now get from banks, 
brokerages and airlines), and also using the service to entice casual customers to join 
their loyalty clubs. They are also sponsoring personal messages from the customers’ 
buddies, some with specially designed displays. (Think of an e-vite that flashes up 
instead of needing to be linked to.) Dotomi hopes to get good news — plus some 
learning experiences! — from the pilot, and enter the US market this fall. 


Meetup: Meetings as media 

Somewhere between presence management in instant messaging, where you can be 
anywhere physically but youre nearby virtually in real-time, and people encounter- 
ing each other in the subway, there’s an opportunity: the need for topic-based 
online communities to find local members and gather in physical space, wherever 
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they may be. Various topic-oriented communities are continually organizing face- 
to-face meetings through everything from e-vites to one group member sending 
around a message saying that he’ll be in Sochi next week if anyone cares to get 
together. First Tuesday took that notion and made something of a business of it, 
starting as a self-organizing networking organization with loosely tethered affiliates 
around the world — and ending up as yet another high-flier come to earth last year. 
However, First Tuesday lives on, and it even has something of a business model, 
based on sponsorships and some event fees, with the managers of each affiliate as 
investors in the network. 


But it took an American marketing whiz, Scott Heiferman, to figure out a broader 
version of that business model. Heiferman, now 30, founded i-traffic back in 1995, 
building on his insight that AOL was an ideal advertising medium. Then an employ- 
ee at Sony, he persuaded AOL — with a few samples — to feature the Walkman on its 
front page, and thence started a business advising clients how to get visibility on the 
Web. As the medium matured and Websites began charging for space that used to be 
free, i-traffic became more of a media-planning/buying company. It was sold to 
Agency.com in 1999. 


MEETUP INFO 


Now Heiferman has found a new kind of underused advertising real 


Headquarters: New York, NY estate — physical space in stores and other commercial venues. The 
Founded: March;2002 idea is to turn topic-oriented meetings into — what could be more 
Empl :7 : . : 

a American? — an advertising medium, and to get sponsors to pay 
Key metric: over 20,000 registered ‘ a z z 
Meetup for delivering the audience — physically. 


users in 540 cities worldwide, cov- 


ering 422 topics 


Funding: $250,000 from management Meetup plays broker between places to meet, mostly commercial 
and 7 angels, including Charles venues — coffee shops, book stores, bowling alleys — and people who 
sommen Tony Sehinitte andon want to meet, and brings the venues traffic during off-peak hours 
Rubin. 


when they are glad of the activity. It also helps the meeters find one 
URL: www.meetup.com E k à ae 
another, and places no restrictions, even implicit ones, on what they 
Disclosure: Esther Dyson is an investor. 


can do once they meet: They can form groups independent of 


Meetup, sell each other insurance, or disband. There are no transac- 
tion fees to circumvent. Obviously Meetup hopes they will continue to use the ser- 
vice, and would discourage a venue from offering free coffee to a group to return 
without Meetup the following month. 


The service (launched earlier this month) encourages users and user groups to pick 


from a broad selection of meeting topics, or to suggest their own, and then an- 
nounces meetings in 500 US cities and 40 outside the US at the same (local) time 
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and day worldwide each month. Users then sign up to attend in their own location, 
and any meeting that attracts four or more people gets a location and confirmations 
are sent out to the attendees. For example, the two most popular topics (Slashdot 
and LiveJournal) each have around 4,000 people set to meet in over 200 cities 
around the world on the same day this month (July 23 at 8 pm for LiveJournal and 
July 25 at 7 pm for Slashdot). 


“The Internet has always been about connecting people,” says Heiferman. “One of the 
great joys in life is connecting with people that have a shared interest: People who 
share a health condition, own a dog of the same breed, or support the same political 
candidate. ... The Internet could do that globally, but until now, ironically, it didn’t 
have a robust way to connect people locally. They want to Meetup, they need a good 
place to Meetup, and these places always value incremental sales and traffic.” 


Of course, like any media-selling agent, Heiferman matches medium and advertiser 
carefully: Nintendo Gamecube fanatics meet at the Gamecube display at BestBuy, 
pug owners at Petco, Corvette lovers at the dealership, environmentalists in parks, 
and so forth. Not all the meetings are of interest to commercial sponsors, and 
Meetup will have to strike a delicate balance between its commercial sponsors and 
users who may want to run their own show — but no one’s forcing anyone to do any- 
thing (and even environmentalists have been known to buy a cup of coffee or per- 
haps an overnight tent). 


Meetup’s Website proclaims: “We never force a Meetup to be at any particular place 
in any town. Venue Voting is when we offer three (hopefully) relevant and conve- 
nient venues for you to vote on. Democracy rules.” But Meetup does pick the three 
venues among which the users select. In the end, it’s like “free” tv: Yes, it’s free, but 
someone else is selecting the programs. If the selection deviates too much from pub- 
lic taste, no one will come, but it’s not really up to the users. They do get to suggest 
other venues. ... And then Meetup acts as a broker, asking the venue if it will pay for 
the incremental traffic. It’s up to each venue to decide whether to offer free pastry 
with the coffee or to jack up prices, but both sides know that the attendees vote each 
time on where to meet. 


Meetup’s best defense against charges of commercialism — and the inevitable prob- 
lems it will face with unruly meeters, no-shows, offensively pushy or commercial 
venue-managers — is the one it is adopting to start: transparency and a degree of do- 
it-yourself management. Other than selecting the initial venues and brokering the 
deals, it is doing what it can to push the implementation out to the users, getting vol- 
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unteers to play host and keeping the meetings small and informal. “It’s “face-to-face 
peer-to-peer,’ says Heiferman. “Like Napster, eBay, or the Net itself, Meetup is a 
dumb decentralized platform ready to connect people.” The rest is up to the users. 
Meetup merely provides a mechanism for them to find one another and to schedule 
under a lightweight brand umbrella, for which it will collect management fees. The 
user data remains sacrosanct, and venues are announced only to those signed up for 
a particular meeting. 


So far, 13,000 people signed up for Meetups in under three weeks out of the gate — 
from Webloggers to Gamecubers to ex-Jehovah’s Witnesses. “We haven't spent a 
dime on marketing; the biz is low-overhead, highly-scalable, and can realize nework- 
effect (more users attracts more users),” says Heiferman. 


So, you could look at this as the further commercialization of the world, or you 
could look at Meetup as a mechanism for users to get stores and other venues to pay 
for a service that helps them to organize themselves and help people connect world- 
wide. Says Heiferman: “People against Starbucks in their neighborhood can either 
fight ‘em or exploit ‘em. . . . Exploit that they’re actually a great place to connect with 
people (thus increasing social capital and strengthening community). Exploit that 
they’re the closest thing to community centers in many neighborhoods — without 
costing tax dollars.” 


We expect that in the long run the impact will be greater where critical mass is hard- 
er to find: that is, not in New York City or Palo Alto, nor in villages where everyone 
knows everyone, but in medium-size locales where people have yet to discover their 
shared interests. 


Stopping Spam at the Source: Self-certifying Access 


The magic of e-mail is that you can send a message to anyone in the world! The tragedy 
of e-mail is that anyone in the world can send a message to you! 


The problem of spam is getting worse and worse. Not only is there “real” spam; now 
we also get fake messages from real people, viruses with spoofed addresses, and a 
torrent of offers from countries that don’t seem likely to pass or enforce anti-spam 
laws anytime soon. Moreover, this is not a problem that could or should be solved 
by legislation anyway. There are many reasons, including freedom-of-speech issues, 
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the difficulty of identifying spam (Alice’s spam is Juan’s exciting opportunity!), and 


the ability of spammers to set up operations outside the legislation’s jurisdiction. 


Other measures include content-based filters, which impose standards that might 


not fit all and miss a lot anyway, or address-book-based filters that may block mail 


you do want. All these approaches, whether commercial or legislated, contradict the 


essential open nature of the Net. 


The real problem is not that only the recipients can identify spam. The senders prob- 


ably have a pretty good notion too, but they don’t care. How can we make them care? 


Vanquish: At last! A sure-fire cure for spam!! Satisfaction guaranteed!!! 


Vanquish, a start-up organized by Philip Raymond, a longtime entrepreneur in the 


electronics/IT area, has figured out a novel approach: Make it cost the sender when a 


recipient decides a message is spam. In identity terms: Get people to authorize them- 


selves to send mail, but make them accountable so that they do care about not being 


spammers. Put the burden on them to figure out what is spam, by knowing enough 


about the recipient to make that judgment correctly. If they guess wrong too often, 


they pay more and more, or lose the ability to send mail to those 
recipients altogether. In other words, sending spam is no longer free, 
and market economics works. 


Vanquish is still months away from launch and will face consider- 
able challenges in refining its model and scaling it up, but here’s the 
overall idea, first from the legitimate sender’s point of view, then 
from the spammer’s, and finally from the recipient’s, who should 
have to do very little other than install the software and enjoy free- 
dom from spam. 


The legitimate sender, call him Juan, wants to send mail to Alice, 
even though she doesn’t know him. He knows Alice is a pilot, and 


VANQUISH INC. INFO 


Headquarters: Marlborough, MA 

Founded: January 2002 

Employees: 5 

Key metric: Projected launch in early 
2003; advisory board includes 
Aaron Kleiner and Arthur 
Obermayer 

Funding: $150,000 from angel investors 


URL: www.vanquish.com/friends/ 


he’s pretty sure she’ll appreciate an invitation to the launch of the new Eclipse 500 


jet. He writes a nice friendly message — with a clear subject line and no “!!!!”— and 


sends it off. 


Almost immediately he gets a reply. . .but not from Alice. It’s from Alice’s ISP, a 


Vanquish partner. Even though he has never heard of Vanquish or the ISP, he can tell 


it’s not spam because its subject line says: “Your message to Alice about ‘Eclipse 
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Aviation launch?’ It tells him that Alice is a subscriber to Vanquish’s “mail-bonding 
service, and invites him to sign up. But this one time, it tells him, all he has to do is 
pass a simple test to prove that he is a human and not a machine (or a spoofed 
return address): If he can answer a simple question — for example, “What is a kitten 
when it grows up?” — it will let his message through. (Thinking of such questions 
would be a fine summer job for a high school student.) 


Meanwhile, Juan is curious about this Vanquish service, and he decides to learn 
more. If it’s good enough for Alice, it’s good enough for him! Vanquish tells him that 
Alice and an increasing number of other people are asking for their correspondents 
to bond their e-mail. The idea is that he puts up a guarantee (with a credit card or 
through his own ISP) that no recipient of his mail will click a “penalty button” which 
is displayed in each message in a Vanquish-protected inbox (compatible with 
Microsoft Outlook, Eudora, and other mail tools and browsers). It lets the user 
either penalize or penalize-and-banish-forever. Each such penalty costs, say, 35 
cents, up to his own credit limit with the bonding agent. He decides to sign up, and 
he starts to think a little more carefully about the mail that he sends. Chances are, 
since he’s just a regular guy, not a marketer or a jerk, he will never have to pay a 
penalty, though he will have to give a credit-card number or an ISP account to back 
up the bonding. (Eventually, there may be a monthly fee, but not until the service 
gets established.) 


The spammer, of course, sends a message to Alice along with thousands of other 
people, and never notices the bounce-back reply. He fails to reply to the Vanquish 
query, and his e-mail is deleted after a few days in quarantine at the Vanquish-pro- 
tected mail server. (Behind the scenes, the Vanquish software can operate from any- 
where: the sender’s ISP, Alice’s ISP, or even Alice’s own machine, depending on how 
she signed up.) 


Alice, for her part, is delighted to receive Juan’s invitation, and she adds him to her 
address book, which remains on her computer. Now he can send her e-mail without 
being queried by Vanquish, even if he doesn’t bond it, but he doesn’t know that. 
Meanwhile, Vanquish has gained a customer. After some months, however, Alice’s 
interest in Juan diminishes. She doesn’t quite know how to tell him, though, so the 
next time she gets a message from him she selects penalize-and-banish. 


BEHIND THE SCENES 


Rather than rely on recipients’ authorization of people they may or may not know, 
in a world where more and more addresses are spoofed anyway, Vanquish offers the 
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senders the opportunity to authenticate and authorize themselves — with a bond 
upfront to guarantee they will do a reasonably good job, or pay the penalty. “It’s not 
whether you know the sender, but whether the sender knows you — or enough about 
you to make a judgment,” says founder Raymond. That is, the seller needs to be will- 
ing to certify himself as a welcome sender. 


Vanquish’s plan is to rely primarily on the monthly fees from e-mail service 
providers, ISPs and direct recipient subscribers. If the service works, there will be few 
penalties, since senders will monitor themselves or ultimately lose the chance to play. 
(That’s not much of a threat right now, but as ISPs adopt the service they may reject 
customers who use up their bond limits. . .and of course the whole idea of the ser- 
vice is to spread broadly.) 


Vanquish’s bonding service gives the “bonded sender” an SMIME digital certificate 
and software that bonds his mail automatically. He doesn’t need to know whether 
recipients are Vanquish subscribers or not, since he does not pay per message but 
rather for bonding all his mail as a default over a subscription period. (The exact 
economics for the bonding agents aren’t yet clear, since there’s no experience yet on 
which to base pricing. The bonding certificate, obviously, isn’t intended for any 
other purpose. From the recipient’s point of view, it keeps out not just spam but 
viruses from unbonded strangers. However, if Juan does somehow get a virus, the 
service will unfortunately diligently do its work and bond all the infected mail he 
sends out. Perhaps Vanquish will require its bondees to use a virus filter. . . .) 


The key, of course, is getting use of the service to spread. Vanquish plans to start with 
a few ISPs who will market the spam-deterrence (not -filtering) service to their cus- 
tomers — probably as value-added rather than as an extra service. Their customers, 
in turn, will “market” it to the people who send them mail. 


VANQUISH IN CONTEXT 

A variety of models can flourish side by side and will probably co-exist with (or 
within) Vanquish as the market sorts them all out. One obvious one (SEE THE con- 
VERSATION CONTINUES, AUGUST 21, 2001) would let the mail recipient collect the penal- 
ties directly, and even vary them according to the sender’s identity. This approach 
will also cut down on spam - especially as spammers figure out that people who 
receive spam for pay are unlikely to buy anything, ever. (For example, if you want to 
send me an e-mail (and you are not in my inbox, or perhaps even if you are!), my 
default charge is $1. If I like what you send, I may decide to cancel the charge. If I 
don’t like it, I may block further mail from you, or I may simply raise my rate to $10, 
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for you personally. It’s up to you whether you want to pay that much next time. You 
may decide Pm not worth it.) 


Certainly, Vanquish is unlikely to be the only outfit offering such a service, despite 
its patent-pending on some of the processes involved. The underlying concepts are 
too strong not to spread, one way or another. Whether it’s Vanquish, Vanquish 
owned by some giant, or some giants on their own that will prevail, we seem to be 
reaching a tipping point with spam that will make a service that seemed excessive 
not long ago, look necessary today. Eventually, there may be a need for “bond inter- 
operability,” so that senders don’t need to subscribe to a multitude of services to 
reach all their correspondents. 


What's ahead? 


The companies and services we outline above are just a beginning. In the world of 
the future, people won't disappear into cyberspace; they’ll be visible there. It may 
sound to us like a strange and creepy place, but we’ll get used to it. Everything will be 
findable and knowable: Actions, words and interactions will persist; the past will be 
ever-present. The developers’ challenge will be to develop tools to organize, visualize 
and filter knowledge, not just to store or find it. Individuals will manage their iden- 
tities just as they now manage their finances, often using third-party services (just as 
they use banks for their money). And, perhaps to their discomfort, they will have to 
define explicitly to their software (as they may not have done to themselves) their 
relationships with all these people: friend, acquaintance, parent of a 


COMING SOON 


child’s schoolmate, former boss (left on good terms), wife of ex-hus- 
band (bad terms), potential customer, friend of a potential cus- 


e Visual filtering of massive 


data 


e Digital identity for objects 


e Geospatial tools 


e And much more.. 
know of any good examples of 
the categories listed above, 
please let us know.) 


. (If you 


tomer you want to meet...the categories are endless, as are the 
criteria to define them and the policies you may want to set to inter- 
act with them. 


Meanwhile, business models will evolve — perhaps not in tandem, 
but in lurches, as concepts intercept with the managements that 
implement them...and eventually, good concepts find good man- 
agements to see them through to success. Right now, the business 
models for individuals are two: User buys and pays for software. Or, 
some marketer pays for “free” service in the hope that somehow the 


association will increase purchases statistically: That is, purchasers 


30 RELEASE 1.0 


WWW.EDVENTURE.COM 


Resources & Contact Information 


Saul Klein, Accelerator Group, 44 (797) 371-8118; fax, 44 (207) 209-4418; saul@klein.name; www.saul.klein.name 
Steve Bowbrick, another.com, 44 (20) 7424-3062; fax, 44 (20) 7424-3063; steve@uk.another.com 
Nikolaj Nyholm, Ascio Technologies, 45 (4093) 0331; fax, 45 (3388) 6101; nikolajn@ascio.com 

Andre Durand, PingID, 1 (303) 883-8100; fax, 1 (303) 316-0588; andre@durand.com 

Yair Goldfinger, Dotomi, 972 (3) 687-3333; fax, 972 (3) 687-3399; yairg@dotomi.com 

Tamir Koch, Dotomi, 972 (3) 687-3333; fax, 972 (3) 687-3399; tamirk@dotomi.com 

Vern Raburn, Eclipse Aviation, vernr@eclipseaviation.com 

Pierre Laurent, Freever, 33 (1) 5856 5200; fax, 33 (1) 5856-5201, pierre@freever.com 

Thomas Blonz, Freever UK, 44 (20) 7287 0000; thomas.blonz@freever.com 

Andrew Tsai, Global Name Registry, 44 (20) 7025-2205; fax, 44 (20) 7242-9105, andrew@tsai.name 
Scott Heiferman, Meetup, 1 (212) 219-9830; fax, 1 (212) 219-9841; scott@meetup.com 

Simon Grice, Midentity, 44 (1787) 211-614; simon@midentity.com 

J.K. Hullett, NetIdentity, 1 (303) 385-4928; fax, 1 (303) 385-4995; jk@netidentity.com 

David Sklaver, Upoc, 1 (212) 430-6555; fax, 1 (212) 430-6554; dsklaver@upoc-inc.com 

Jeff Asher, Vanquish inc., 1 (510) 482-8709; fax, 1 (800) 757-0371; jeff@vanquish.com 

Philip Raymond, Vanguish Inc., 1 (508) 486-9040 (ext 11); fax, 1 (508) 861-0200; phil@vanquish.com 


For further reading: 

Information on the Whois Task Force: 
http://www.dnso.org/clubpublic/nc-whois/ArcOO/ NC Whois 

Whois TF Final report presented in Bucharest (26 Jun 2002): 
http://www.dnso.org/dnso/notes/20020626.NCbucharest-WhoisTF- final.ppt 


of the vendor’s products pay for the “free” content or services provided by the ven- 
dor for anyone. Statistically that works, but as statistics give way to better and better 
knowledge and prediction of individuals’ purchase behavior, there will be less and 
less subsidization of services for nonpurchasers by purchasers. 


Will this world foster a backlash stronger than Napster? Is it immoral to go the bath- 
room during a commercial and avoid the opportunity to be persuaded to buy a new 
brand of toothpaste? And should the increasing visibility of consumers’ behavior be 
matched by transparency for business and government officials? These questions 
and more face us in the future. jgr1.o 
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The conversation never stops! Subscribe to our free email newsletter, The conversation 


continues, for thought-provoking analysis from our editors and commentary from our highly intelligent 


readers. Sign up at http://www.edventure.com/conversation/join.cfm. 
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